In the Linux kernel, the following vulnerability has been resolved:

drm/vc4: Free the BO cache size list on teardown

vc4_bo_cache_destroy() purges the cached BOs but never frees the size
list, leaking it on every unbind.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
c826a6e1064419f78855463cf29ce9e8b9d25bf4 affected < bf2848e50bd73782c2942ec023b5b60231f16e9b
c826a6e1064419f78855463cf29ce9e8b9d25bf4 affected < 035ad1bc964f6698e9b06c26ffe94bcac08dadea
c826a6e1064419f78855463cf29ce9e8b9d25bf4 affected < bea10b84e22efa22b005e8dba1a19df4e04a7649
c826a6e1064419f78855463cf29ce9e8b9d25bf4 affected < 40870a0290cd913c9d94f98ed87ebe00dd091e53
c826a6e1064419f78855463cf29ce9e8b9d25bf4 affected < b41ff8b529278216cba22a5dcdc93fea2a3a9619
Linux Linux affected
Version Status Constraints
4.5 affected —
0 unaffected < 4.5
6.6.160 unaffected ≤ 6.6.*
6.12.113 unaffected ≤ 6.12.*
6.18.57 unaffected ≤ 6.18.*
7.2.11 unaffected ≤ 7.2.*
7.3 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/035ad1bc964f6698e9b06c26ffe94bcac08dadea cve-icon cve-icon
https://git.kernel.org/stable/c/40870a0290cd913c9d94f98ed87ebe00dd091e53 cve-icon cve-icon
https://git.kernel.org/stable/c/b41ff8b529278216cba22a5dcdc93fea2a3a9619 cve-icon cve-icon
https://git.kernel.org/stable/c/bea10b84e22efa22b005e8dba1a19df4e04a7649 cve-icon cve-icon
https://git.kernel.org/stable/c/bf2848e50bd73782c2942ec023b5b60231f16e9b cve-icon cve-icon
History

Fri, 23 Oct 2026 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux linux
Vendors & Products Linux linux

Fri, 23 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees the size list, leaking it on every unbind.
Title drm/vc4: Free the BO cache size list on teardown
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-23T12:19:43.586Z

Reserved: 2026-09-25T10:25:14.383Z

Link: CVE-2026-98970

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-23T13:17:18.563

Modified: 2026-10-23T13:17:18.563

Link: CVE-2026-98970

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T17:45:17Z

Weaknesses

No weakness.